Maven/org.gradle:gradle-core CVE-2019-11065: medium 5.9, EPSS 1.36%

Insecure transport protocol in Gradle

Action: Upgrade org.gradle:gradle-core to 5.4.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-pprq-4488-wgqx
• https://nvd.nist.gov/vuln/detail/CVE-2019-11065
• https://github.com/gradle/gradle/pull/8927
• https://github.com/gradle/gradle
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WVXOXNLAYRGPKAZV63PYNV3HF27JW2MW
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y43P7SVDJOG6OUDVFR4ZIDITZLNHPGTO
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQ5CGOV5QVQCSPGE3WRZDKUGIXLHSZDR

CVE-2019-11065 · published 2022-05-13T01:21:57Z · modified 2023-11-08T04:00:59.495896Z · JSON